|
Legal
›
Privacy Policy
|
Legal
›
Privacy Policy
Effective Date: July 8, 2026 · Last Updated: July 28, 2026
We collect the data needed to run StackEasy's card-management tools. We do not sell your personal data. Financial account data is treated as sensitive and used only to deliver the Service. This page explains what we collect, how we use and share it, and the privacy rights available to you.
This Privacy Policy describes how StackEasy, Inc. ("StackEasy," "we," "us," "our") collects, uses, and shares information when you use stackeasy.ai, app.stackeasy.ai, and our related services (the "Service"). It applies to visitors, registered users, and Premium subscribers.
If you choose to connect a credit card or financial account, we use Quiltt and MX Technologies to establish a tokenized, read-only connection. Through this connection we receive data such as account balances, transactions, credit limits, and utilization — but we do not receive or store your account login credentials, Social Security number, or full account number.
We and our service providers automatically collect information such as IP address, browser type, device identifiers, pages viewed, and referring URLs, typically via cookies and similar technologies. See our Cookie Policy for details.
If you click a link to a partner card issuer or financial product, we may receive confirmation that a click or application occurred, which we use to track affiliate compensation as described in our Terms of Service.
We do not sell your personal data. We share information only as described below:
We share data with vendors who help us operate the Service, including:
If you connect an AI assistant, such as Claude or ChatGPT, or any other Model Context Protocol (MCP) client, to your StackEasy account, that connection is initiated by you from within the AI client and authorized through OAuth 2.1. Access granted through an MCP connector is read-only: the connected AI client can retrieve the data our connector tools return, such as your cards, balances, utilization, and rewards data, but it cannot make changes to your account, move money, or take any action on your behalf. StackEasy never receives the AI client's login credentials, and we do not sell data accessed through this connection. You can revoke a connected AI client's access at any time from that app's connector settings, which immediately ends its access to your StackEasy data.
When you apply for a card or product through the Service, we may share limited information (such as confirmation of a click or application) with the relevant issuer or affiliate network to attribute the referral, as described in our Terms of Service.
We may disclose information if required by law, subpoena, or legal process, or where we believe disclosure is necessary to protect the rights, property, or safety of StackEasy, our users, or the public.
If StackEasy is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction, subject to standard confidentiality protections.
Financial account data — such as balances, transactions, credit limits, utilization, and due dates — is treated as sensitive personal information. We use it only to provide and improve the Service. We do not sell this data, and we do not use it for third-party advertising.
Some features of the Service (such as card recommendations and spending insights) are generated by automated processing of your account data, including through AI/machine-learning models, which may include third-party AI providers. No automated decision made through the Service has a legal or similarly significant effect on you (for example, we do not use automated processing to approve or deny you credit — that decision is always made by the card issuer or lender). If you are located in the EU or UK, you may request human review of an automated output that meaningfully affects you by contacting hello@stackeasy.ai.
We do not use your personal or financial data to train our own or any third party's AI models.
We use cookies and similar technologies for essential site functioning, analytics (Google Analytics, PostHog, and possibly Umami), and advertising measurement (Meta Pixel). Details, including how to manage your preferences, are in our Cookie Policy.
If you are a California resident, you have the right to:
We do not sell personal information for money. Because we use advertising tools like Meta Pixel, some data sharing with that advertising partner may be considered "sharing" under the CPRA's broad definition, even though no data is sold. To opt out of this sharing, or to exercise any other right above, email hello@stackeasy.ai with "California Privacy Request" in the subject line.
Global Privacy Control (GPC): We intend to honor GPC opt-out signals as a valid request to opt out of sale/sharing where legally required. Automated GPC detection is not yet implemented on our website; until it is, please use the email request method above to exercise this right. (We are evaluating adding automated GPC support.)
If you are a resident of Virginia, Colorado, Connecticut, Texas, or another state with a comprehensive privacy law, you have similar rights: to access, correct, delete, and obtain a copy of your personal information, and to opt out of targeted advertising or sale/sharing. If we deny a request, you have the right to appeal by replying to our denial email or contacting hello@stackeasy.ai with "Privacy Appeal" in the subject line. We will not discriminate against you for exercising any of these rights.
StackEasy is a U.S.-based company and our Service is focused on U.S. users. We do not intentionally target or market the Service to individuals in the EU or UK. If you access the Service from outside the U.S., your information will be processed in the U.S. as described in this Policy. Where GDPR/UK GDPR applies, we process personal data on the following legal bases: performance of a contract with you, your consent, our legitimate interests (for example, securing and improving the Service), and compliance with legal obligations. EU/UK users may still request access, correction, deletion, or human review of automated decisions by contacting hello@stackeasy.ai.
We retain personal information for as long as needed to provide the Service and for legitimate business or legal purposes:
Specific retention periods for a given data category are available on request by emailing hello@stackeasy.ai.
We use industry-standard safeguards to protect your information, including 256-bit/TLS encryption in transit and at rest, and access controls limiting who can view sensitive data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify affected users and applicable regulators as required by law.
The Service is not directed to individuals under 18, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact hello@stackeasy.ai and we will take appropriate steps to delete it.
StackEasy is based in the United States, and information we collect is processed and stored in the U.S. If you access the Service from outside the U.S., you understand your information will be transferred to and processed in the U.S., which may have different data protection laws than your country of residence.
Every marketing email we send includes an unsubscribe link. Account and transactional messages (such as billing receipts or security alerts) are not optional and will continue even if you opt out of marketing. We use Brevo to send email. To opt out of marketing, use the unsubscribe link in any marketing email or contact hello@stackeasy.ai.
We may update this Privacy Policy from time to time. We will post the revised Policy with an updated "Effective Date," and where changes are material, we will make reasonable efforts to notify you (such as by email or in-app notice).
Questions about this Policy or your data? Contact us: